Australian sanctions API in Ruby: DFAT screening jobs

{
  "subject": {
    "name": "Mira Calder",
    "entityType": "person",
    "birthDate": "1984"
  },
  "package": "sandbox@1",
  "retention": "standard"
}

# Ruby 3.1+. Standard library only. Backend or trusted CLI.
require 'json'
require 'net/http'
require 'uri'
require 'openssl'
begin
  key = ENV.fetch('SANCTIONSKIT_API_KEY')
  operation = ENV.fetch('SCREENING_OPERATION_ID')
  raise 'Operation ID must not be empty.' if operation.empty?
  raw = File.binread(ARGV[0] || 'request.json')
  raise 'Request file exceeds 64 KiB.' if raw.bytesize > 65_536
  body = JSON.parse(raw)
  unless body.is_a?(Hash) && body['subject'] && (body.key?('sources') ^ body.key?('package'))
    raise 'Supply a subject and exactly one of sources or package.'
  end
  uri = URI('https://www.sanctionskit.com/api/v1/screenings')
  request = Net::HTTP::Post.new(uri)
  request['Authorization'] = "Bearer #{key}"
  request['Content-Type'] = 'application/json'
  request['Idempotency-Key'] = operation
  request.body = JSON.generate(body)
  payload = +''
  status = 0
  Net::HTTP.start(uri.host, uri.port, use_ssl: true, verify_mode: OpenSSL::SSL::VERIFY_PEER,
                  open_timeout: 10, read_timeout: 25, write_timeout: 25) do |http|
    http.max_retries = 0
    http.request(request) do |response|
      status = response.code.to_i
      response.read_body do |chunk|
        raise 'Response size limit exceeded.' if payload.bytesize + chunk.bytesize > 8 * 1024 * 1024
        payload << chunk
      end
    end
  end
  # Net::HTTP does not automatically follow redirects.
  envelope = JSON.parse(payload)
  raise "Screening incomplete: HTTP #{status}." unless (200...300).cover?(status)
  data = envelope.is_a?(Hash) ? envelope['data'] : nil
  unless data.is_a?(Hash) && data['id'].is_a?(String) && !data['id'].empty? &&
         %w[potential_match no_match].include?(data['status']) && data['matches'].is_a?(Array)
    raise 'Incomplete response: unexpected screening shape.'
  end
  count = data['matches'].length
  if (data['status'] == 'no_match' && count != 0) || (data['status'] == 'potential_match' && count == 0)
    raise 'Incomplete response: inconsistent screening shape.'
  end
  puts JSON.generate(id: data['id'], status: data['status'], candidateCount: count)
rescue StandardError => error
  warn "Screening did not complete: #{error.class}. Check the operation before retrying."
  exit 1
end

ruby screen.rb request.json

curl --fail-with-body --max-time 25 --header "Authorization: Bearer $SANCTIONSKIT_API_KEY" "https://www.sanctionskit.com/api/v1/sources"

{
  "subject": {
    "name": "Mira Calder",
    "entityType": "person",
    "birthDate": "1984"
  },
  "sources": [
    "au-consolidated"
  ],
  "retention": "standard"
}